CVE-2022-24654

MediumCVSS 5.4

Published: 15/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

54th percentile - higher than 54% of all known CVEs

Summary

Authenticated stored cross-site scripting (XSS) vulnerability in the "Field Server Address" field of INTELBRAS ATA 200 firmware version 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.

Risk Assessment

The risk involves potential execution of malicious scripts in browsers of other authenticated users, which could lead to session hijacking, configuration changes, or further network attacks.

Recommendation

It is recommended to immediately update INTELBRAS ATA 200 firmware to the latest version and implement input validation and sanitization for the "Field Server Address" field.

Original NVD description (English source)

Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.